{
"properties": {
"displayName": "CIS Microsoft Azure Foundations Benchmark v1.3.0",
"policyType": "BuiltIn",
"description": "The Center for Internet Security (CIS) is a nonprofit entity whose mission is to 'identify, develop, validate, promote, and sustain best practice solutions for cyberdefense.' CIS benchmarks are configuration baselines and best practices for securely configuring a system. These policies address a subset of CIS Microsoft Azure Foundations Benchmark v1.3.0 controls. For more information, visit https://aka.ms/cisazure130-initiative",
"metadata": {
"version": "8.13.0",
"category": "Regulatory Compliance"
},
"version": "8.13.0",
"policyDefinitionGroups": [
{
"name": "CIS_Azure_1.3.0_1.1",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.1"
},
{
"name": "CIS_Azure_1.3.0_1.2",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.2"
},
{
"name": "CIS_Azure_1.3.0_1.3",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.3"
},
{
"name": "CIS_Azure_1.3.0_1.4",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.4"
},
{
"name": "CIS_Azure_1.3.0_1.5",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.5"
},
{
"name": "CIS_Azure_1.3.0_1.6",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.6"
},
{
"name": "CIS_Azure_1.3.0_1.7",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.7"
},
{
"name": "CIS_Azure_1.3.0_1.8",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.8"
},
{
"name": "CIS_Azure_1.3.0_1.9",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.9"
},
{
"name": "CIS_Azure_1.3.0_1.10",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.10"
},
{
"name": "CIS_Azure_1.3.0_1.11",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.11"
},
{
"name": "CIS_Azure_1.3.0_1.12",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.12"
},
{
"name": "CIS_Azure_1.3.0_1.13",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.13"
},
{
"name": "CIS_Azure_1.3.0_1.14",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.14"
},
{
"name": "CIS_Azure_1.3.0_1.15",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.15"
},
{
"name": "CIS_Azure_1.3.0_1.16",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.16"
},
{
"name": "CIS_Azure_1.3.0_1.17",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.17"
},
{
"name": "CIS_Azure_1.3.0_1.18",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.18"
},
{
"name": "CIS_Azure_1.3.0_1.19",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.19"
},
{
"name": "CIS_Azure_1.3.0_1.20",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.20"
},
{
"name": "CIS_Azure_1.3.0_1.21",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.21"
},
{
"name": "CIS_Azure_1.3.0_1.22",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.22"
},
{
"name": "CIS_Azure_1.3.0_1.23",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_1.23"
},
{
"name": "CIS_Azure_1.3.0_2.1",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_2.1"
},
{
"name": "CIS_Azure_1.3.0_2.2",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_2.2"
},
{
"name": "CIS_Azure_1.3.0_2.3",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_2.3"
},
{
"name": "CIS_Azure_1.3.0_2.4",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_2.4"
},
{
"name": "CIS_Azure_1.3.0_2.5",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_2.5"
},
{
"name": "CIS_Azure_1.3.0_2.6",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_2.6"
},
{
"name": "CIS_Azure_1.3.0_2.7",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_2.7"
},
{
"name": "CIS_Azure_1.3.0_2.8",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_2.8"
},
{
"name": "CIS_Azure_1.3.0_2.9",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_2.9"
},
{
"name": "CIS_Azure_1.3.0_2.10",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_2.10"
},
{
"name": "CIS_Azure_1.3.0_2.11",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_2.11"
},
{
"name": "CIS_Azure_1.3.0_2.12",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_2.12"
},
{
"name": "CIS_Azure_1.3.0_2.13",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_2.13"
},
{
"name": "CIS_Azure_1.3.0_2.14",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_2.14"
},
{
"name": "CIS_Azure_1.3.0_2.15",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_2.15"
},
{
"name": "CIS_Azure_1.3.0_3.1",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_3.1"
},
{
"name": "CIS_Azure_1.3.0_3.2",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_3.2"
},
{
"name": "CIS_Azure_1.3.0_3.3",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_3.3"
},
{
"name": "CIS_Azure_1.3.0_3.4",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_3.4"
},
{
"name": "CIS_Azure_1.3.0_3.5",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_3.5"
},
{
"name": "CIS_Azure_1.3.0_3.6",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_3.6"
},
{
"name": "CIS_Azure_1.3.0_3.7",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_3.7"
},
{
"name": "CIS_Azure_1.3.0_3.8",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_3.8"
},
{
"name": "CIS_Azure_1.3.0_3.9",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_3.9"
},
{
"name": "CIS_Azure_1.3.0_3.10",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_3.10"
},
{
"name": "CIS_Azure_1.3.0_3.11",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_3.11"
},
{
"name": "CIS_Azure_1.3.0_4.1.1",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.1.1"
},
{
"name": "CIS_Azure_1.3.0_4.1.2",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.1.2"
},
{
"name": "CIS_Azure_1.3.0_4.1.3",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.1.3"
},
{
"name": "CIS_Azure_1.3.0_4.2.1",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.2.1"
},
{
"name": "CIS_Azure_1.3.0_4.2.2",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.2.2"
},
{
"name": "CIS_Azure_1.3.0_4.2.3",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.2.3"
},
{
"name": "CIS_Azure_1.3.0_4.2.4",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.2.4"
},
{
"name": "CIS_Azure_1.3.0_4.2.5",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.2.5"
},
{
"name": "CIS_Azure_1.3.0_4.3.1",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.3.1"
},
{
"name": "CIS_Azure_1.3.0_4.3.2",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.3.2"
},
{
"name": "CIS_Azure_1.3.0_4.3.3",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.3.3"
},
{
"name": "CIS_Azure_1.3.0_4.3.4",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.3.4"
},
{
"name": "CIS_Azure_1.3.0_4.3.5",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.3.5"
},
{
"name": "CIS_Azure_1.3.0_4.3.6",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.3.6"
},
{
"name": "CIS_Azure_1.3.0_4.3.7",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.3.7"
},
{
"name": "CIS_Azure_1.3.0_4.3.8",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.3.8"
},
{
"name": "CIS_Azure_1.3.0_4.4",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.4"
},
{
"name": "CIS_Azure_1.3.0_4.5",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_4.5"
},
{
"name": "CIS_Azure_1.3.0_5.1.1",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_5.1.1"
},
{
"name": "CIS_Azure_1.3.0_5.1.2",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_5.1.2"
},
{
"name": "CIS_Azure_1.3.0_5.1.3",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_5.1.3"
},
{
"name": "CIS_Azure_1.3.0_5.1.4",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_5.1.4"
},
{
"name": "CIS_Azure_1.3.0_5.1.5",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_5.1.5"
},
{
"name": "CIS_Azure_1.3.0_5.2.1",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_5.2.1"
},
{
"name": "CIS_Azure_1.3.0_5.2.2",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_5.2.2"
},
{
"name": "CIS_Azure_1.3.0_5.2.3",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_5.2.3"
},
{
"name": "CIS_Azure_1.3.0_5.2.4",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_5.2.4"
},
{
"name": "CIS_Azure_1.3.0_5.2.5",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_5.2.5"
},
{
"name": "CIS_Azure_1.3.0_5.2.6",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_5.2.6"
},
{
"name": "CIS_Azure_1.3.0_5.2.7",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_5.2.7"
},
{
"name": "CIS_Azure_1.3.0_5.2.8",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_5.2.8"
},
{
"name": "CIS_Azure_1.3.0_5.2.9",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_5.2.9"
},
{
"name": "CIS_Azure_1.3.0_5.3",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_5.3"
},
{
"name": "CIS_Azure_1.3.0_6.1",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_6.1"
},
{
"name": "CIS_Azure_1.3.0_6.2",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_6.2"
},
{
"name": "CIS_Azure_1.3.0_6.3",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_6.3"
},
{
"name": "CIS_Azure_1.3.0_6.4",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_6.4"
},
{
"name": "CIS_Azure_1.3.0_6.5",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_6.5"
},
{
"name": "CIS_Azure_1.3.0_6.6",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_6.6"
},
{
"name": "CIS_Azure_1.3.0_7.1",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_7.1"
},
{
"name": "CIS_Azure_1.3.0_7.2",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_7.2"
},
{
"name": "CIS_Azure_1.3.0_7.3",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_7.3"
},
{
"name": "CIS_Azure_1.3.0_7.4",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_7.4"
},
{
"name": "CIS_Azure_1.3.0_7.5",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_7.5"
},
{
"name": "CIS_Azure_1.3.0_7.6",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_7.6"
},
{
"name": "CIS_Azure_1.3.0_7.7",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_7.7"
},
{
"name": "CIS_Azure_1.3.0_8.1",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_8.1"
},
{
"name": "CIS_Azure_1.3.0_8.2",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_8.2"
},
{
"name": "CIS_Azure_1.3.0_8.3",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_8.3"
},
{
"name": "CIS_Azure_1.3.0_8.4",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_8.4"
},
{
"name": "CIS_Azure_1.3.0_8.5",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_8.5"
},
{
"name": "CIS_Azure_1.3.0_9.1",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_9.1"
},
{
"name": "CIS_Azure_1.3.0_9.2",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_9.2"
},
{
"name": "CIS_Azure_1.3.0_9.3",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_9.3"
},
{
"name": "CIS_Azure_1.3.0_9.4",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_9.4"
},
{
"name": "CIS_Azure_1.3.0_9.5",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_9.5"
},
{
"name": "CIS_Azure_1.3.0_9.6",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_9.6"
},
{
"name": "CIS_Azure_1.3.0_9.7",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_9.7"
},
{
"name": "CIS_Azure_1.3.0_9.8",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_9.8"
},
{
"name": "CIS_Azure_1.3.0_9.9",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_9.9"
},
{
"name": "CIS_Azure_1.3.0_9.10",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_9.10"
},
{
"name": "CIS_Azure_1.3.0_9.11",
"additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_1.3.0_9.11"
}
],
"parameters": {
"effect-aa633080-8b72-40c4-a2d7-d00c03e80bed": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: MFA should be enabled on accounts with owner permissions on your subscription",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-e3e008c3-56b9-4133-8fd7-d3347377402a": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: MFA should be enabled on accounts with owner permissions on your subscription",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-9297c21d-2ed6-4474-b48f-163f75654ce3": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: MFA should be enabled accounts with write permissions on your subscription",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-931e118d-50a1-4457-a5e4-78550e086c52": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: MFA should be enabled accounts with write permissions on your subscription",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-e3576e28-8b17-4677-84c3-db2990658d64": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: MFA should be enabled on accounts with read permissions on your subscription",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-81b3ccb4-e6e8-4e4a-8d05-5df25cd29fd4": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: MFA should be enabled on accounts with read permissions on your subscription",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-5f76cf89-fbf2-47fd-a3f4-b891fa780b60": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: External accounts with read permissions should be removed from your subscription",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-e9ac8f8e-ce22-4355-8f04-99b911d6be52": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: External accounts with read permissions should be removed from your subscription",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-5c607a2e-c700-4744-8254-d77e7c9eb5e4": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: External accounts with write permissions should be removed from your subscription",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-94e1c2ac-cbbe-4cac-a2b5-389c812dee87": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: External accounts with write permissions should be removed from your subscription",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-f8456c1c-aa66-4dfb-861a-25d127b775c9": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: External accounts with owner permissions should be removed from your subscription",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-339353f6-2387-4a45-abe4-7f529d121046": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: External accounts with owner permissions should be removed from your subscription",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"Audit",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Custom subscription owner roles should not exist",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-4da35fc9-c9e7-4960-aec9-797fe7d9051d": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Azure Defender for servers should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-2913021d-f2fd-4f3d-b958-22354e2bdbcb": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Azure Defender for App Service should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-7fe3b40f-802b-4cdd-8bd4-fd799c948cc2": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Azure Defender for Azure SQL Database servers should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-6581d072-105e-4418-827f-bd446d56421b": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Azure Defender for SQL servers on machines should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-308fbb08-4ab8-4e67-9b29-592e93fb94fa": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Azure Defender for Storage should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-640d2586-54d2-465f-877f-9ffc1d2109f4": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Microsoft Defender for Storage should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-523b5cd1-3e23-492f-a539-13118b6d1e3a": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Azure Defender for Kubernetes should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-c25d9a16-bc35-4e15-a7e5-9db606bf9ed4": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Azure Defender for container registries should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-1c988dd6-ade4-430f-a608-2a3e5b0a6d38": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Microsoft Defender for Containers should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-0e6763cc-5078-4e64-889d-ff4d9a839047": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Azure Defender for Key Vault should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-475aae12-b88a-4572-8b36-9b712b2b3a17": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Auto provisioning of the Log Analytics agent should be enabled on your subscription",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Subscriptions should have a contact email address for security issues",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-6e2593d9-add6-4083-9c9b-4b7d2188c899": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Email notification for high severity alerts should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-404c3081-a854-4457-ae30-26a93ef643f9": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Deny",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Secure transfer to storage accounts should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-4fa4b6c0-31ca-4c0d-b10d-24b96f62a751": {
"type": "String",
"defaultValue": "audit",
"allowedValues": [
"audit",
"deny",
"disabled"
],
"metadata": {
"displayName": "Effect for policy: Storage account public access should be disallowed",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-34c877ad-507e-4c82-993e-3452a6e0ad3c": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Deny",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Storage accounts should restrict network access",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-2a1a9cdf-e04d-429a-8416-3bfb72a1b26f": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Deny",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Storage accounts should restrict network access using virtual network rules",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-c9d007d0-c057-4772-b18c-01e546713bcd": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Deny",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Storage accounts should allow access from trusted Microsoft services",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-6fac406b-40ca-413b-bf8e-0bf964659c25": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Storage account should use customer-managed key for encryption",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Auditing on SQL server should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"setting-a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9": {
"type": "String",
"defaultValue": "enabled",
"allowedValues": [
"enabled",
"disabled"
],
"metadata": {
"displayName": "Required auditing setting for SQL servers"
}
},
"effect-17k78e20-9358-41c9-923c-fb736d382a12": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Transparent Data Encryption on SQL databases should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-89099bee-89e0-4b26-a5f4-165451757743": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: SQL servers should be configured with 90 days auditing retention or higher.",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Advanced data security should be enabled on your SQL servers",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Advanced data security should be enabled on SQL Managed Instance",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Vulnerability assessment should be enabled on your SQL servers",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-1b7aa243-30e4-4c9e-bca8-d0d3022b634a": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Vulnerability assessment should be enabled on SQL Managed Instance",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Vulnerability Assessment settings for SQL server should contain an email address to receive scan reports",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-e802a67a-daf5-4436-9ea6-f6d821dd0c5d": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Enforce SSL connection should be enabled for MySQL database servers",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-d158790f-bfb0-486c-8631-2dc6b4e8e6af": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Enforce SSL connection should be enabled for PostgreSQL database servers",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Log checkpoints should be enabled for PostgreSQL database servers",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-eb6f77b9-bd53-4e35-a23d-7f65d5f0e442": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Log connections should be enabled for PostgreSQL database servers",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-eb6f77b9-bd53-4e35-a23d-7f65d5f0e446": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Disconnections should be logged for PostgreSQL database servers.",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-5345bb39-67dc-4960-a1bf-427e16b9a0bd": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Connection throttling should be enabled for PostgreSQL database servers",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-1f314764-cb73-4fc9-b863-8eca98ac36e9": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: An Azure Active Directory administrator should be provisioned for SQL servers",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-0d134df8-db83-46fb-ad72-fe0c9428c8dd": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: SQL servers should use customer-managed keys to encrypt data at rest",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-048248b0-55cd-46da-b1ff-39efd52db260": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: SQL managed instances should use customer-managed keys to encrypt data at rest",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-0a370ff3-6cab-4e85-8995-295fd854c5b8": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Deny",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: SQL servers should use customer-managed keys to encrypt data at rest",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-ac01ad65-10e5-46df-bdd9-6b0cad13e1d2": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Deny",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: SQL managed instances should use customer-managed keys to encrypt data at rest",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-fbb99e8e-e444-4da0-9ff1-75c92f5a85b2": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Storage account containing the container with activity logs must be encrypted with BYOK",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-c5447c04-a4d7-4ba8-a263-c9ee321a6858-MicrosoftAuthorization-policyAssignments-write": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: An activity log alert should exist for specific Policy operations (Microsoft.Authorization/policyAssignments/write)",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-c5447c04-a4d7-4ba8-a263-c9ee321a6858-MicrosoftAuthorization-policyAssignments-delete": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: An activity log alert should exist for specific Policy operations (Microsoft.Authorization/policyAssignments/delete)",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftNetwork-networkSecurityGroups-write": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.Network/networkSecurityGroups/write)",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftNetwork-networkSecurityGroups-delete": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.Network/networkSecurityGroups/delete)",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftNetwork-networkSecurityGroups-securityRules-write": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.Network/networkSecurityGroups/securityRules/write)",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftNetwork-networkSecurityGroups-securityRules-delete": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.Network/networkSecurityGroups/securityRules/delete)",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-3b980d31-7904-4bb7-8575-5665739a8052-MicrosoftSecurity-securitySolutions-write": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: An activity log alert should exist for specific Security operations (Microsoft.Security/securitySolutions/write)",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-3b980d31-7904-4bb7-8575-5665739a8052-MicrosoftSecurity-securitySolutions-delete": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: An activity log alert should exist for specific Security operations (Microsoft.Security/securitySolutions/delete)",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftSql-servers-firewallRules-write": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.Sql/servers/firewallRules/write)",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftSql-servers-firewallRules-delete": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.Sql/servers/firewallRules/delete)",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-cf820ca0-f99e-4f3e-84fb-66e913812d21": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Resource logs in Key Vault should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"requiredRetentionDays": {
"type": "String",
"defaultValue": "365",
"metadata": {
"displayName": "Required retention period (days) for resource logs",
"description": "For more information about resource logs, visit https://aka.ms/resourcelogs"
}
},
"effect-b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Resource logs in App Services should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-91a78b24-f231-4a8a-8da9-02c35b2b6510": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Resource logs in App Services should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-428256e6-1fac-4f48-a757-df34c2b3336d": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Resource logs in Batch accounts should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-7c1b1214-f927-48bf-8882-84f0af6588b1": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Resource logs in Virtual Machine Scale Sets should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"includeAKSClusters-7c1b1214-f927-48bf-8882-84f0af6588b1": {
"type": "Boolean",
"defaultValue": false,
"metadata": {
"displayName": "Include AKS clusters when auditing if virtual machine scale set resource logs are enabled",
"deprecated": true
}
},
"effect-057ef27e-665e-4328-8ea3-04b3122bd9fb": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Resource logs in Azure Data Lake Store should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-c95c74d9-38fe-4f0d-af86-0c7d626a315c": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Resource logs in Data Lake Analytics should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-83a214f7-d01a-484b-91a9-ed54470c9a6a": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Resource logs in Event Hub should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-383856f8-de7f-44a2-81fc-e5135b5c2aa4": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Resource logs in IoT Hub should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-34f95f76-5386-4de7-b824-0d8478470c9d": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Resource logs in Logic Apps should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-b4330a05-a843-4bc8-bf9a-cacce50c67f4": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Resource logs in Search services should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-f8d36e2f-389b-4ee4-898d-21aeb69a0f45": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Resource logs in Service Bus should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-f9be5368-9bf5-4b84-9e0a-7850da98bb46": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Resource logs in Azure Stream Analytics should be enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-e372f825-a257-4fb8-9175-797a8a8627d6": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: RDP access from the Internet should be blocked",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-2c89a2e5-7285-40fe-afe0-ae8654b92fab": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: SSH access from the Internet should be blocked",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"listOfLocations-b6e2945c-0b7b-40f5-9233-7a5323b5cdc6": {
"type": "Array",
"defaultValue": [],
"metadata": {
"displayName": "List of regions where Network Watcher should be enabled",
"description": "To see a complete list of regions, run the PowerShell command Get-AzLocation",
"strongType": "location",
"deprecated": true
}
},
"resourceGroupName-b6e2945c-0b7b-40f5-9233-7a5323b5cdc6": {
"type": "String",
"defaultValue": "NetworkWatcherRG",
"metadata": {
"displayName": "Name of the resource group for Network Watcher",
"description": "Name of the resource group where Network Watchers are located"
}
},
"effect-0961003e-5a0a-4549-abde-af6a37f2724d": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Virtual machines should encrypt temp disks, caches, and data flows between Compute and Storage resources",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-2c89a2e5-7285-40fe-afe0-ae8654b92fb2": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"Audit",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Unattached disks should be encrypted",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-c0e996f8-39cf-4af9-9f45-83fbde810432": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Deny",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Only approved VM extensions should be installed",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"approvedExtensions-c0e996f8-39cf-4af9-9f45-83fbde810432": {
"type": "Array",
"defaultValue": [
"AzureDiskEncryption",
"AzureDiskEncryptionForLinux",
"DependencyAgentWindows",
"DependencyAgentLinux",
"IaaSAntimalware",
"IaaSDiagnostics",
"LinuxDiagnostic",
"MicrosoftMonitoringAgent",
"NetworkWatcherAgentLinux",
"NetworkWatcherAgentWindows",
"OmsAgentForLinux",
"VMSnapshot",
"VMSnapshotLinux"
],
"metadata": {
"displayName": "List of virtual machine extensions that are approved for use",
"description": "A semicolon-separated list of virtual machine extensions; to see a complete list of extensions, use the Azure PowerShell command Get-AzVMExtensionImage"
}
},
"effect-86b3d65f-7626-441e-b690-81a8b71cff60": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: System updates should be installed on your machines",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-af6cd1bd-1635-48cb-bde7-5b15693900b9": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Monitor missing Endpoint Protection in Azure Security Center",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Deny",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Keys should have expiration dates set",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-98728c90-32c7-4049-8429-847dc0f4fe37": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Deny",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Secrets should have expiration dates set",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-0b60c0b2-2dc2-4e1c-b5c9-abbed971de53": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Deny",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Key vault should have purge protection enabled",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-ac4a19c2-fa67-49b4-8ae5-0b2e78c49457": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Role-Based Access Control (RBAC) should be used on Kubernetes Services",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-c4ebc54a-46e1-481a-bee2-d4411e95d828": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Authentication should be enabled on your API app",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Authentication should be enabled on your Function app",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-95bccee9-a7f8-4bec-9ee9-62c3473701fc": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Authentication should be enabled on your web app",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-a4af4a39-4135-47fb-b175-47fbdf85311d": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Web Application should only be accessible over HTTPS",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Latest TLS version should be used in your API App",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-f9d614c5-c173-4d56-95a7-b4437057d193": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Latest TLS version should be used in your Function App",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Latest TLS version should be used in your Web App",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-0c192fe8-9cbb-4516-85b3-0ade8bd03886": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"Audit",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Ensure API app has 'Client Certificates (Incoming client certificates)' set to 'On'",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-eaebaea7-8013-4ceb-9d14-7eb32271373c": {
"type": "String",
"defaultValue": "Audit",
"allowedValues": [
"Audit",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Ensure Function app has 'Client Certificates (Incoming client certificates)' set to 'On'",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-5bb220d9-2698-4ee4-8404-b9c30c9df609": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"Audit",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Ensure WEB app has 'Client Certificates (Incoming client certificates)' set to 'On'",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-c4d441f8-f9d9-4a9e-9cef-e82117cb3eef": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Managed identity should be used in your API App",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-0da106f2-4ca3-48e8-bc85-c638fe6aea8f": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Managed identity should be used in your Function App",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-2b9ad585-36bc-4615-b300-fd4435808332": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Managed identity should be used in your Web App",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Ensure that 'PHP version' is the latest, if used as a part of the API app",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"PHPLatestVersion": {
"type": "String",
"defaultValue": "7.3",
"metadata": {
"displayName": "Latest PHP version for App Services",
"description": "Latest supported PHP version for App Services",
"deprecated": true
}
},
"effect-7261b898-8a84-4db8-9e04-18527132abb3": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Ensure that 'PHP version' is the latest, if used as a part of the WEB app",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-74c3584d-afae-46f7-a20a-6f8adba71a16": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Ensure that 'Python version' is the latest, if used as a part of the API app",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"LinuxPythonLatestVersion": {
"type": "String",
"defaultValue": "3.8",
"metadata": {
"displayName": "Latest Python version for Linux for App Services",
"description": "Latest supported Python version for App Services",
"deprecated": true
}
},
"effect-7238174a-fd10-4ef0-817e-fc820a951d73": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Ensure that 'Python version' is the latest, if used as a part of the Function app",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-7008174a-fd10-4ef0-817e-fc820a951d73": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Ensure that 'Python version' is the latest, if used as a part of the Web app",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-88999f4c-376a-45c8-bcb3-4058f713cf39": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Ensure that 'Java version' is the latest, if used as a part of the API app",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"JavaLatestVersion": {
"type": "String",
"defaultValue": "11",
"metadata": {
"displayName": "Latest Java version for App Services",
"description": "Latest supported Java version for App Services",
"deprecated": true
}
},
"effect-9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Ensure that 'Java version' is the latest, if used as a part of the Function app",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-496223c3-ad65-4ecd-878a-bae78737e9ed": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Ensure that 'Java version' is the latest, if used as a part of the Web app",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-991310cd-e9f3-47bc-b7b6-f57b557d07db": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Ensure that 'HTTP Version' is the latest, if used to run the API app",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-e2c1c086-2d84-4019-bff3-c44ccd95113c": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Ensure that 'HTTP Version' is the latest, if used to run the Function app",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-8c122334-9d20-4eb8-89ea-ac9a705b74ae": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: Ensure that 'HTTP Version' is the latest, if used to run the Web app",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-9a1b8c48-453a-4044-86c3-d8bfd823e4f5": {
"type": "String",
"defaultValue": "Disabled",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: FTPS only should be required in your API App",
"description": "For more information about effects, visit https://aka.ms/policyeffects",
"deprecated": true
}
},
"effect-399b2637-a50f-4f95-96f8-3a145476eb15": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: FTPS only should be required in your Function App",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
},
"effect-4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b": {
"type": "String",
"defaultValue": "AuditIfNotExists",
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"metadata": {
"displayName": "Effect for policy: FTPS should be required in your Web App",
"description": "For more information about effects, visit https://aka.ms/policyeffects"
}
}
},
"policyDefinitions": [
{
"policyDefinitionReferenceId": "e9ac8f8e-ce22-4355-8f04-99b911d6be52",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e9ac8f8e-ce22-4355-8f04-99b911d6be52",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-e9ac8f8e-ce22-4355-8f04-99b911d6be52')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_1.3"
]
},
{
"policyDefinitionReferenceId": "94e1c2ac-cbbe-4cac-a2b5-389c812dee87",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/94e1c2ac-cbbe-4cac-a2b5-389c812dee87",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-94e1c2ac-cbbe-4cac-a2b5-389c812dee87')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_1.3"
]
},
{
"policyDefinitionReferenceId": "339353f6-2387-4a45-abe4-7f529d121046",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/339353f6-2387-4a45-abe4-7f529d121046",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-339353f6-2387-4a45-abe4-7f529d121046')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_1.3"
]
},
{
"policyDefinitionReferenceId": "4da35fc9-c9e7-4960-aec9-797fe7d9051d",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-4da35fc9-c9e7-4960-aec9-797fe7d9051d')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_2.1"
]
},
{
"policyDefinitionReferenceId": "2913021d-f2fd-4f3d-b958-22354e2bdbcb",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-2913021d-f2fd-4f3d-b958-22354e2bdbcb')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_2.2"
]
},
{
"policyDefinitionReferenceId": "7fe3b40f-802b-4cdd-8bd4-fd799c948cc2",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-7fe3b40f-802b-4cdd-8bd4-fd799c948cc2')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_2.3"
]
},
{
"policyDefinitionReferenceId": "6581d072-105e-4418-827f-bd446d56421b",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-6581d072-105e-4418-827f-bd446d56421b')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_2.4"
]
},
{
"policyDefinitionReferenceId": "640d2586-54d2-465f-877f-9ffc1d2109f4",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/640d2586-54d2-465f-877f-9ffc1d2109f4",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-640d2586-54d2-465f-877f-9ffc1d2109f4')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_2.5"
]
},
{
"policyDefinitionReferenceId": "1c988dd6-ade4-430f-a608-2a3e5b0a6d38",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c988dd6-ade4-430f-a608-2a3e5b0a6d38",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-1c988dd6-ade4-430f-a608-2a3e5b0a6d38')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_2.6",
"CIS_Azure_1.3.0_2.7"
]
},
{
"policyDefinitionReferenceId": "0e6763cc-5078-4e64-889d-ff4d9a839047",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-0e6763cc-5078-4e64-889d-ff4d9a839047')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_2.8"
]
},
{
"policyDefinitionReferenceId": "4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_2.13"
]
},
{
"policyDefinitionReferenceId": "6e2593d9-add6-4083-9c9b-4b7d2188c899",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-6e2593d9-add6-4083-9c9b-4b7d2188c899')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_2.14"
]
},
{
"policyDefinitionReferenceId": "404c3081-a854-4457-ae30-26a93ef643f9",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9",
"definitionVersion": "2.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-404c3081-a854-4457-ae30-26a93ef643f9')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_3.1"
]
},
{
"policyDefinitionReferenceId": "4fa4b6c0-31ca-4c0d-b10d-24b96f62a751",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751",
"definitionVersion": "3.*.*-preview",
"parameters": {
"effect": {
"value": "[parameters('effect-4fa4b6c0-31ca-4c0d-b10d-24b96f62a751')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_3.5",
"CIS_Azure_1.3.0_5.1.3"
]
},
{
"policyDefinitionReferenceId": "34c877ad-507e-4c82-993e-3452a6e0ad3c",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-34c877ad-507e-4c82-993e-3452a6e0ad3c')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_3.6"
]
},
{
"policyDefinitionReferenceId": "2a1a9cdf-e04d-429a-8416-3bfb72a1b26f",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-2a1a9cdf-e04d-429a-8416-3bfb72a1b26f')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_3.6"
]
},
{
"policyDefinitionReferenceId": "c9d007d0-c057-4772-b18c-01e546713bcd",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c9d007d0-c057-4772-b18c-01e546713bcd",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-c9d007d0-c057-4772-b18c-01e546713bcd')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_3.7"
]
},
{
"policyDefinitionReferenceId": "6fac406b-40ca-413b-bf8e-0bf964659c25",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-6fac406b-40ca-413b-bf8e-0bf964659c25')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_3.9"
]
},
{
"policyDefinitionReferenceId": "a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9",
"definitionVersion": "2.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9')]"
},
"setting": {
"value": "[parameters('setting-a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_4.1.1"
]
},
{
"policyDefinitionReferenceId": "17k78e20-9358-41c9-923c-fb736d382a12",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12",
"definitionVersion": "2.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-17k78e20-9358-41c9-923c-fb736d382a12')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_4.1.2"
]
},
{
"policyDefinitionReferenceId": "89099bee-89e0-4b26-a5f4-165451757743",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743",
"definitionVersion": "3.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-89099bee-89e0-4b26-a5f4-165451757743')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_4.1.3"
]
},
{
"policyDefinitionReferenceId": "abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9",
"definitionVersion": "2.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_4.2.1"
]
},
{
"policyDefinitionReferenceId": "abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_4.2.1"
]
},
{
"policyDefinitionReferenceId": "ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9",
"definitionVersion": "3.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_4.2.2"
]
},
{
"policyDefinitionReferenceId": "1b7aa243-30e4-4c9e-bca8-d0d3022b634a",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-1b7aa243-30e4-4c9e-bca8-d0d3022b634a')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_4.2.2"
]
},
{
"policyDefinitionReferenceId": "d158790f-bfb0-486c-8631-2dc6b4e8e6af",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-d158790f-bfb0-486c-8631-2dc6b4e8e6af')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_4.3.1"
]
},
{
"policyDefinitionReferenceId": "e802a67a-daf5-4436-9ea6-f6d821dd0c5d",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-e802a67a-daf5-4436-9ea6-f6d821dd0c5d')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_4.3.2"
]
},
{
"policyDefinitionReferenceId": "eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_4.3.3"
]
},
{
"policyDefinitionReferenceId": "eb6f77b9-bd53-4e35-a23d-7f65d5f0e442",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e442",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-eb6f77b9-bd53-4e35-a23d-7f65d5f0e442')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_4.3.4"
]
},
{
"policyDefinitionReferenceId": "eb6f77b9-bd53-4e35-a23d-7f65d5f0e446",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e446",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-eb6f77b9-bd53-4e35-a23d-7f65d5f0e446')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_4.3.5"
]
},
{
"policyDefinitionReferenceId": "5345bb39-67dc-4960-a1bf-427e16b9a0bd",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5345bb39-67dc-4960-a1bf-427e16b9a0bd",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-5345bb39-67dc-4960-a1bf-427e16b9a0bd')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_4.3.6"
]
},
{
"policyDefinitionReferenceId": "1f314764-cb73-4fc9-b863-8eca98ac36e9",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-1f314764-cb73-4fc9-b863-8eca98ac36e9')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_4.4"
]
},
{
"policyDefinitionReferenceId": "0a370ff3-6cab-4e85-8995-295fd854c5b8",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a370ff3-6cab-4e85-8995-295fd854c5b8",
"definitionVersion": "2.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-0a370ff3-6cab-4e85-8995-295fd854c5b8')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_4.5"
]
},
{
"policyDefinitionReferenceId": "ac01ad65-10e5-46df-bdd9-6b0cad13e1d2",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ac01ad65-10e5-46df-bdd9-6b0cad13e1d2",
"definitionVersion": "2.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-ac01ad65-10e5-46df-bdd9-6b0cad13e1d2')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_4.5"
]
},
{
"policyDefinitionReferenceId": "fbb99e8e-e444-4da0-9ff1-75c92f5a85b2",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fbb99e8e-e444-4da0-9ff1-75c92f5a85b2",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-fbb99e8e-e444-4da0-9ff1-75c92f5a85b2')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.1.4"
]
},
{
"policyDefinitionReferenceId": "c5447c04-a4d7-4ba8-a263-c9ee321a6858-0",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858",
"definitionVersion": "3.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-c5447c04-a4d7-4ba8-a263-c9ee321a6858-MicrosoftAuthorization-policyAssignments-write')]"
},
"operationName": {
"value": "Microsoft.Authorization/policyAssignments/write"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.2.1"
]
},
{
"policyDefinitionReferenceId": "c5447c04-a4d7-4ba8-a263-c9ee321a6858-1",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858",
"definitionVersion": "3.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-c5447c04-a4d7-4ba8-a263-c9ee321a6858-MicrosoftAuthorization-policyAssignments-delete')]"
},
"operationName": {
"value": "Microsoft.Authorization/policyAssignments/delete"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.2.2"
]
},
{
"policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a-0",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftNetwork-networkSecurityGroups-write')]"
},
"operationName": {
"value": "Microsoft.Network/networkSecurityGroups/write"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.2.3"
]
},
{
"policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a-1",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftNetwork-networkSecurityGroups-delete')]"
},
"operationName": {
"value": "Microsoft.Network/networkSecurityGroups/delete"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.2.4"
]
},
{
"policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a-2",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftNetwork-networkSecurityGroups-securityRules-write')]"
},
"operationName": {
"value": "Microsoft.Network/networkSecurityGroups/securityRules/write"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.2.5"
]
},
{
"policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a-3",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftNetwork-networkSecurityGroups-securityRules-delete')]"
},
"operationName": {
"value": "Microsoft.Network/networkSecurityGroups/securityRules/delete"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.2.6"
]
},
{
"policyDefinitionReferenceId": "3b980d31-7904-4bb7-8575-5665739a8052-0",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-3b980d31-7904-4bb7-8575-5665739a8052-MicrosoftSecurity-securitySolutions-write')]"
},
"operationName": {
"value": "Microsoft.Security/securitySolutions/write"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.2.7"
]
},
{
"policyDefinitionReferenceId": "3b980d31-7904-4bb7-8575-5665739a8052-1",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-3b980d31-7904-4bb7-8575-5665739a8052-MicrosoftSecurity-securitySolutions-delete')]"
},
"operationName": {
"value": "Microsoft.Security/securitySolutions/delete"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.2.8"
]
},
{
"policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a-4",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftSql-servers-firewallRules-write')]"
},
"operationName": {
"value": "Microsoft.Sql/servers/firewallRules/write"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.2.9"
]
},
{
"policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a-5",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftSql-servers-firewallRules-delete')]"
},
"operationName": {
"value": "Microsoft.Sql/servers/firewallRules/delete"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.2.9"
]
},
{
"policyDefinitionReferenceId": "cf820ca0-f99e-4f3e-84fb-66e913812d21",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21",
"definitionVersion": "5.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-cf820ca0-f99e-4f3e-84fb-66e913812d21')]"
},
"requiredRetentionDays": {
"value": "[parameters('requiredRetentionDays')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.1.5",
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "91a78b24-f231-4a8a-8da9-02c35b2b6510",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510",
"definitionVersion": "2.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-91a78b24-f231-4a8a-8da9-02c35b2b6510')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "428256e6-1fac-4f48-a757-df34c2b3336d",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d",
"definitionVersion": "5.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-428256e6-1fac-4f48-a757-df34c2b3336d')]"
},
"requiredRetentionDays": {
"value": "[parameters('requiredRetentionDays')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "057ef27e-665e-4328-8ea3-04b3122bd9fb",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb",
"definitionVersion": "5.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-057ef27e-665e-4328-8ea3-04b3122bd9fb')]"
},
"requiredRetentionDays": {
"value": "[parameters('requiredRetentionDays')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "c95c74d9-38fe-4f0d-af86-0c7d626a315c",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c",
"definitionVersion": "5.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-c95c74d9-38fe-4f0d-af86-0c7d626a315c')]"
},
"requiredRetentionDays": {
"value": "[parameters('requiredRetentionDays')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "83a214f7-d01a-484b-91a9-ed54470c9a6a",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a",
"definitionVersion": "5.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-83a214f7-d01a-484b-91a9-ed54470c9a6a')]"
},
"requiredRetentionDays": {
"value": "[parameters('requiredRetentionDays')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "383856f8-de7f-44a2-81fc-e5135b5c2aa4",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4",
"definitionVersion": "3.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-383856f8-de7f-44a2-81fc-e5135b5c2aa4')]"
},
"requiredRetentionDays": {
"value": "[parameters('requiredRetentionDays')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "34f95f76-5386-4de7-b824-0d8478470c9d",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d",
"definitionVersion": "5.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-34f95f76-5386-4de7-b824-0d8478470c9d')]"
},
"requiredRetentionDays": {
"value": "[parameters('requiredRetentionDays')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "b4330a05-a843-4bc8-bf9a-cacce50c67f4",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4",
"definitionVersion": "5.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-b4330a05-a843-4bc8-bf9a-cacce50c67f4')]"
},
"requiredRetentionDays": {
"value": "[parameters('requiredRetentionDays')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "f8d36e2f-389b-4ee4-898d-21aeb69a0f45",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45",
"definitionVersion": "5.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-f8d36e2f-389b-4ee4-898d-21aeb69a0f45')]"
},
"requiredRetentionDays": {
"value": "[parameters('requiredRetentionDays')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "f9be5368-9bf5-4b84-9e0a-7850da98bb46",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46",
"definitionVersion": "5.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-f9be5368-9bf5-4b84-9e0a-7850da98bb46')]"
},
"requiredRetentionDays": {
"value": "[parameters('requiredRetentionDays')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "b6e2945c-0b7b-40f5-9233-7a5323b5cdc6",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6",
"definitionVersion": "3.*.*",
"parameters": {
"resourceGroupName": {
"value": "[parameters('resourceGroupName-b6e2945c-0b7b-40f5-9233-7a5323b5cdc6')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_6.5"
]
},
{
"policyDefinitionReferenceId": "06a78e20-9358-41c9-923c-fb736d382a4d",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_7.1"
]
},
{
"policyDefinitionReferenceId": "c0e996f8-39cf-4af9-9f45-83fbde810432",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c0e996f8-39cf-4af9-9f45-83fbde810432",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-c0e996f8-39cf-4af9-9f45-83fbde810432')]"
},
"approvedExtensions": {
"value": "[parameters('approvedExtensions-c0e996f8-39cf-4af9-9f45-83fbde810432')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_7.4"
]
},
{
"policyDefinitionReferenceId": "152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_8.1"
]
},
{
"policyDefinitionReferenceId": "98728c90-32c7-4049-8429-847dc0f4fe37",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-98728c90-32c7-4049-8429-847dc0f4fe37')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_8.2"
]
},
{
"policyDefinitionReferenceId": "0b60c0b2-2dc2-4e1c-b5c9-abbed971de53",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53",
"definitionVersion": "2.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-0b60c0b2-2dc2-4e1c-b5c9-abbed971de53')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_8.4"
]
},
{
"policyDefinitionReferenceId": "ac4a19c2-fa67-49b4-8ae5-0b2e78c49457",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457",
"definitionVersion": "1.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-ac4a19c2-fa67-49b4-8ae5-0b2e78c49457')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_8.5"
]
},
{
"policyDefinitionReferenceId": "c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8",
"definitionVersion": "3.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_9.1"
]
},
{
"policyDefinitionReferenceId": "95bccee9-a7f8-4bec-9ee9-62c3473701fc",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc",
"definitionVersion": "2.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-95bccee9-a7f8-4bec-9ee9-62c3473701fc')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_9.1"
]
},
{
"policyDefinitionReferenceId": "a4af4a39-4135-47fb-b175-47fbdf85311d",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d",
"definitionVersion": "4.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-a4af4a39-4135-47fb-b175-47fbdf85311d')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_9.2"
]
},
{
"policyDefinitionReferenceId": "f9d614c5-c173-4d56-95a7-b4437057d193",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193",
"definitionVersion": "2.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-f9d614c5-c173-4d56-95a7-b4437057d193')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_9.3"
]
},
{
"policyDefinitionReferenceId": "f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b",
"definitionVersion": "2.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_9.3"
]
},
{
"policyDefinitionReferenceId": "eaebaea7-8013-4ceb-9d14-7eb32271373c",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c",
"definitionVersion": "3.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-eaebaea7-8013-4ceb-9d14-7eb32271373c')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_9.4"
]
},
{
"policyDefinitionReferenceId": "19dd1db6-f442-49cf-a838-b0786b4401ef",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/19dd1db6-f442-49cf-a838-b0786b4401ef",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_9.4"
]
},
{
"policyDefinitionReferenceId": "0da106f2-4ca3-48e8-bc85-c638fe6aea8f",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f",
"definitionVersion": "3.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-0da106f2-4ca3-48e8-bc85-c638fe6aea8f')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_9.5"
]
},
{
"policyDefinitionReferenceId": "2b9ad585-36bc-4615-b300-fd4435808332",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332",
"definitionVersion": "3.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-2b9ad585-36bc-4615-b300-fd4435808332')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_9.5"
]
},
{
"policyDefinitionReferenceId": "e2c1c086-2d84-4019-bff3-c44ccd95113c",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e2c1c086-2d84-4019-bff3-c44ccd95113c",
"definitionVersion": "4.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-e2c1c086-2d84-4019-bff3-c44ccd95113c')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_9.9"
]
},
{
"policyDefinitionReferenceId": "8c122334-9d20-4eb8-89ea-ac9a705b74ae",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c122334-9d20-4eb8-89ea-ac9a705b74ae",
"definitionVersion": "4.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-8c122334-9d20-4eb8-89ea-ac9a705b74ae')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_9.9"
]
},
{
"policyDefinitionReferenceId": "399b2637-a50f-4f95-96f8-3a145476eb15",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15",
"definitionVersion": "3.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-399b2637-a50f-4f95-96f8-3a145476eb15')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_9.10"
]
},
{
"policyDefinitionReferenceId": "4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b",
"definitionVersion": "3.*.*",
"parameters": {
"effect": {
"value": "[parameters('effect-4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b')]"
}
},
"groupNames": [
"CIS_Azure_1.3.0_9.10"
]
},
{
"policyDefinitionReferenceId": "7d7a8356-5c34-9a95-3118-1424cfaf192a",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7d7a8356-5c34-9a95-3118-1424cfaf192a",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.1",
"CIS_Azure_1.3.0_1.2",
"CIS_Azure_1.3.0_1.4",
"CIS_Azure_1.3.0_1.20",
"CIS_Azure_1.3.0_1.22"
]
},
{
"policyDefinitionReferenceId": "49c23d9b-02b0-0e42-4f94-e8cef1b8381b",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/49c23d9b-02b0-0e42-4f94-e8cef1b8381b",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.3",
"CIS_Azure_1.3.0_3.3",
"CIS_Azure_1.3.0_3.10",
"CIS_Azure_1.3.0_3.11",
"CIS_Azure_1.3.0_4.1.1",
"CIS_Azure_1.3.0_4.3.3",
"CIS_Azure_1.3.0_4.3.4",
"CIS_Azure_1.3.0_4.3.5",
"CIS_Azure_1.3.0_4.3.6",
"CIS_Azure_1.3.0_5.1.2",
"CIS_Azure_1.3.0_5.1.5",
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "a830fe9e-08c9-a4fb-420c-6f6bf1702395",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a830fe9e-08c9-a4fb-420c-6f6bf1702395",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.3"
]
},
{
"policyDefinitionReferenceId": "79f081c7-1634-01a1-708e-376197999289",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/79f081c7-1634-01a1-708e-376197999289",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.3"
]
},
{
"policyDefinitionReferenceId": "f96d2186-79df-262d-3f76-f371e3b71798",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f96d2186-79df-262d-3f76-f371e3b71798",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.3"
]
},
{
"policyDefinitionReferenceId": "7805a343-275c-41be-9d62-7215b96212d8",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7805a343-275c-41be-9d62-7215b96212d8",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.3"
]
},
{
"policyDefinitionReferenceId": "ae5345d5-8dab-086a-7290-db43a3272198",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ae5345d5-8dab-086a-7290-db43a3272198",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.4",
"CIS_Azure_1.3.0_1.20",
"CIS_Azure_1.3.0_1.22"
]
},
{
"policyDefinitionReferenceId": "056a723b-4946-9d2a-5243-3aa27c4d31a1",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/056a723b-4946-9d2a-5243-3aa27c4d31a1",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.4",
"CIS_Azure_1.3.0_1.20",
"CIS_Azure_1.3.0_1.22"
]
},
{
"policyDefinitionReferenceId": "2cc9c165-46bd-9762-5739-d2aae5ba90a1",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2cc9c165-46bd-9762-5739-d2aae5ba90a1",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.6",
"CIS_Azure_1.3.0_1.7",
"CIS_Azure_1.3.0_1.8",
"CIS_Azure_1.3.0_4.4",
"CIS_Azure_1.3.0_9.5"
]
},
{
"policyDefinitionReferenceId": "34d38ea7-6754-1838-7031-d7fd07099821",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34d38ea7-6754-1838-7031-d7fd07099821",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.6",
"CIS_Azure_1.3.0_1.7",
"CIS_Azure_1.3.0_1.8",
"CIS_Azure_1.3.0_4.4",
"CIS_Azure_1.3.0_9.5"
]
},
{
"policyDefinitionReferenceId": "48c816c5-2190-61fc-8806-25d6f3df162f",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/48c816c5-2190-61fc-8806-25d6f3df162f",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.6",
"CIS_Azure_1.3.0_1.7",
"CIS_Azure_1.3.0_1.8",
"CIS_Azure_1.3.0_4.4",
"CIS_Azure_1.3.0_9.5"
]
},
{
"policyDefinitionReferenceId": "8489ff90-8d29-61df-2d84-f9ab0f4c5e84",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8489ff90-8d29-61df-2d84-f9ab0f4c5e84",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.6",
"CIS_Azure_1.3.0_1.7",
"CIS_Azure_1.3.0_1.8",
"CIS_Azure_1.3.0_4.4",
"CIS_Azure_1.3.0_9.5"
]
},
{
"policyDefinitionReferenceId": "e4b00788-7e1c-33ec-0418-d048508e095b",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e4b00788-7e1c-33ec-0418-d048508e095b",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.7",
"CIS_Azure_1.3.0_1.8"
]
},
{
"policyDefinitionReferenceId": "f26af0b1-65b6-689a-a03f-352ad2d00f98",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f26af0b1-65b6-689a-a03f-352ad2d00f98",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.8",
"CIS_Azure_1.3.0_3.3",
"CIS_Azure_1.3.0_3.10",
"CIS_Azure_1.3.0_3.11",
"CIS_Azure_1.3.0_4.1.1",
"CIS_Azure_1.3.0_4.3.3",
"CIS_Azure_1.3.0_4.3.4",
"CIS_Azure_1.3.0_4.3.5",
"CIS_Azure_1.3.0_4.3.6",
"CIS_Azure_1.3.0_5.1.2",
"CIS_Azure_1.3.0_5.1.5",
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "ed87d27a-9abf-7c71-714c-61d881889da4",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ed87d27a-9abf-7c71-714c-61d881889da4",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.8"
]
},
{
"policyDefinitionReferenceId": "873895e8-0e3a-6492-42e9-22cd030e9fcd",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/873895e8-0e3a-6492-42e9-22cd030e9fcd",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.8"
]
},
{
"policyDefinitionReferenceId": "32f22cfa-770b-057c-965b-450898425519",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/32f22cfa-770b-057c-965b-450898425519",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.8",
"CIS_Azure_1.3.0_3.4"
]
},
{
"policyDefinitionReferenceId": "e714b481-8fac-64a2-14a9-6f079b2501a4",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e714b481-8fac-64a2-14a9-6f079b2501a4",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.8"
]
},
{
"policyDefinitionReferenceId": "aeed863a-0f56-429f-945d-8bb66bd06841",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aeed863a-0f56-429f-945d-8bb66bd06841",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.9",
"CIS_Azure_1.3.0_1.10",
"CIS_Azure_1.3.0_1.11",
"CIS_Azure_1.3.0_1.12",
"CIS_Azure_1.3.0_1.13",
"CIS_Azure_1.3.0_1.14",
"CIS_Azure_1.3.0_1.15",
"CIS_Azure_1.3.0_1.16",
"CIS_Azure_1.3.0_1.17",
"CIS_Azure_1.3.0_1.18",
"CIS_Azure_1.3.0_1.19",
"CIS_Azure_1.3.0_1.21",
"CIS_Azure_1.3.0_1.23",
"CIS_Azure_1.3.0_3.5",
"CIS_Azure_1.3.0_8.5"
]
},
{
"policyDefinitionReferenceId": "50e9324a-7410-0539-0662-2c1e775538b7",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/50e9324a-7410-0539-0662-2c1e775538b7",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.9",
"CIS_Azure_1.3.0_1.10",
"CIS_Azure_1.3.0_1.11",
"CIS_Azure_1.3.0_1.12",
"CIS_Azure_1.3.0_1.13",
"CIS_Azure_1.3.0_1.14",
"CIS_Azure_1.3.0_1.15",
"CIS_Azure_1.3.0_1.16",
"CIS_Azure_1.3.0_1.17",
"CIS_Azure_1.3.0_1.18",
"CIS_Azure_1.3.0_1.19",
"CIS_Azure_1.3.0_1.21",
"CIS_Azure_1.3.0_1.23",
"CIS_Azure_1.3.0_3.5",
"CIS_Azure_1.3.0_8.5"
]
},
{
"policyDefinitionReferenceId": "b1666a13-8f67-9c47-155e-69e027ff6823",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b1666a13-8f67-9c47-155e-69e027ff6823",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.9",
"CIS_Azure_1.3.0_1.10",
"CIS_Azure_1.3.0_1.11",
"CIS_Azure_1.3.0_1.12",
"CIS_Azure_1.3.0_1.13",
"CIS_Azure_1.3.0_1.14",
"CIS_Azure_1.3.0_1.15",
"CIS_Azure_1.3.0_1.16",
"CIS_Azure_1.3.0_1.17",
"CIS_Azure_1.3.0_1.18",
"CIS_Azure_1.3.0_1.19",
"CIS_Azure_1.3.0_1.21",
"CIS_Azure_1.3.0_1.23",
"CIS_Azure_1.3.0_3.5",
"CIS_Azure_1.3.0_8.5"
]
},
{
"policyDefinitionReferenceId": "10c4210b-3ec9-9603-050d-77e4d26c7ebb",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/10c4210b-3ec9-9603-050d-77e4d26c7ebb",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.12",
"CIS_Azure_1.3.0_1.13",
"CIS_Azure_1.3.0_1.14",
"CIS_Azure_1.3.0_1.15",
"CIS_Azure_1.3.0_3.5",
"CIS_Azure_1.3.0_8.5"
]
},
{
"policyDefinitionReferenceId": "de770ba6-50dd-a316-2932-e0d972eaa734",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/de770ba6-50dd-a316-2932-e0d972eaa734",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.12",
"CIS_Azure_1.3.0_1.13",
"CIS_Azure_1.3.0_1.14",
"CIS_Azure_1.3.0_1.15",
"CIS_Azure_1.3.0_3.5",
"CIS_Azure_1.3.0_8.5"
]
},
{
"policyDefinitionReferenceId": "eb1c944e-0e94-647b-9b7e-fdb8d2af0838",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eb1c944e-0e94-647b-9b7e-fdb8d2af0838",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.12",
"CIS_Azure_1.3.0_1.13",
"CIS_Azure_1.3.0_1.14",
"CIS_Azure_1.3.0_1.15",
"CIS_Azure_1.3.0_3.5",
"CIS_Azure_1.3.0_8.5"
]
},
{
"policyDefinitionReferenceId": "03b6427e-6072-4226-4bd9-a410ab65317e",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/03b6427e-6072-4226-4bd9-a410ab65317e",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.12",
"CIS_Azure_1.3.0_1.13",
"CIS_Azure_1.3.0_1.14",
"CIS_Azure_1.3.0_1.21"
]
},
{
"policyDefinitionReferenceId": "1bc7fd64-291f-028e-4ed6-6e07886e163f",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1bc7fd64-291f-028e-4ed6-6e07886e163f",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.12",
"CIS_Azure_1.3.0_1.13",
"CIS_Azure_1.3.0_1.14",
"CIS_Azure_1.3.0_1.21"
]
},
{
"policyDefinitionReferenceId": "bd4dc286-2f30-5b95-777c-681f3a7913d3",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd4dc286-2f30-5b95-777c-681f3a7913d3",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.16",
"CIS_Azure_1.3.0_1.17",
"CIS_Azure_1.3.0_1.18",
"CIS_Azure_1.3.0_1.19",
"CIS_Azure_1.3.0_1.21",
"CIS_Azure_1.3.0_1.23",
"CIS_Azure_1.3.0_8.3"
]
},
{
"policyDefinitionReferenceId": "dad8a2e9-6f27-4fc2-8933-7e99fe700c9c",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dad8a2e9-6f27-4fc2-8933-7e99fe700c9c",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.20",
"CIS_Azure_1.3.0_1.22"
]
},
{
"policyDefinitionReferenceId": "83dfb2b8-678b-20a0-4c44-5c75ada023e6",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/83dfb2b8-678b-20a0-4c44-5c75ada023e6",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.20",
"CIS_Azure_1.3.0_1.22"
]
},
{
"policyDefinitionReferenceId": "3d492600-27ba-62cc-a1c3-66eb919f6a0d",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3d492600-27ba-62cc-a1c3-66eb919f6a0d",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.20",
"CIS_Azure_1.3.0_1.22"
]
},
{
"policyDefinitionReferenceId": "cd36eeec-67e7-205a-4b64-dbfe3b4e3e4e",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cd36eeec-67e7-205a-4b64-dbfe3b4e3e4e",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.20",
"CIS_Azure_1.3.0_1.22"
]
},
{
"policyDefinitionReferenceId": "518eafdd-08e5-37a9-795b-15a8d798056d",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/518eafdd-08e5-37a9-795b-15a8d798056d",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.20",
"CIS_Azure_1.3.0_1.22"
]
},
{
"policyDefinitionReferenceId": "6f1de470-79f3-1572-866e-db0771352fc8",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6f1de470-79f3-1572-866e-db0771352fc8",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_1.22",
"CIS_Azure_1.3.0_9.1",
"CIS_Azure_1.3.0_9.4"
]
},
{
"policyDefinitionReferenceId": "3d399cf3-8fc6-0efc-6ab0-1412f1198517",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3d399cf3-8fc6-0efc-6ab0-1412f1198517",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_2.1",
"CIS_Azure_1.3.0_2.2",
"CIS_Azure_1.3.0_2.3",
"CIS_Azure_1.3.0_2.4",
"CIS_Azure_1.3.0_2.5",
"CIS_Azure_1.3.0_2.6",
"CIS_Azure_1.3.0_2.7",
"CIS_Azure_1.3.0_2.8",
"CIS_Azure_1.3.0_2.9",
"CIS_Azure_1.3.0_2.10",
"CIS_Azure_1.3.0_7.6"
]
},
{
"policyDefinitionReferenceId": "63f63e71-6c3f-9add-4c43-64de23e554a7",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/63f63e71-6c3f-9add-4c43-64de23e554a7",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_2.1",
"CIS_Azure_1.3.0_2.2",
"CIS_Azure_1.3.0_2.3",
"CIS_Azure_1.3.0_2.4",
"CIS_Azure_1.3.0_2.5",
"CIS_Azure_1.3.0_2.6",
"CIS_Azure_1.3.0_2.7",
"CIS_Azure_1.3.0_2.8",
"CIS_Azure_1.3.0_2.9",
"CIS_Azure_1.3.0_2.10",
"CIS_Azure_1.3.0_7.6"
]
},
{
"policyDefinitionReferenceId": "50e81644-923d-33fc-6ebb-9733bc8d1a06",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/50e81644-923d-33fc-6ebb-9733bc8d1a06",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_2.1",
"CIS_Azure_1.3.0_2.2",
"CIS_Azure_1.3.0_2.3",
"CIS_Azure_1.3.0_2.4",
"CIS_Azure_1.3.0_2.5",
"CIS_Azure_1.3.0_2.6",
"CIS_Azure_1.3.0_2.7",
"CIS_Azure_1.3.0_2.8",
"CIS_Azure_1.3.0_2.9",
"CIS_Azure_1.3.0_2.10",
"CIS_Azure_1.3.0_4.2.1",
"CIS_Azure_1.3.0_7.6"
]
},
{
"policyDefinitionReferenceId": "3c5e0e1a-216f-8f49-0a15-76ed0d8b8e1f",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3c5e0e1a-216f-8f49-0a15-76ed0d8b8e1f",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_2.1",
"CIS_Azure_1.3.0_2.2",
"CIS_Azure_1.3.0_2.3",
"CIS_Azure_1.3.0_2.4",
"CIS_Azure_1.3.0_2.5",
"CIS_Azure_1.3.0_2.6",
"CIS_Azure_1.3.0_2.7",
"CIS_Azure_1.3.0_2.8",
"CIS_Azure_1.3.0_2.9",
"CIS_Azure_1.3.0_2.10",
"CIS_Azure_1.3.0_4.2.2",
"CIS_Azure_1.3.0_4.2.3",
"CIS_Azure_1.3.0_4.2.4",
"CIS_Azure_1.3.0_4.2.5",
"CIS_Azure_1.3.0_7.6"
]
},
{
"policyDefinitionReferenceId": "4a6f5cbd-6c6b-006f-2bb1-091af1441bce",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4a6f5cbd-6c6b-006f-2bb1-091af1441bce",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_2.1",
"CIS_Azure_1.3.0_2.2",
"CIS_Azure_1.3.0_2.3",
"CIS_Azure_1.3.0_2.4",
"CIS_Azure_1.3.0_2.5",
"CIS_Azure_1.3.0_2.6",
"CIS_Azure_1.3.0_2.7",
"CIS_Azure_1.3.0_2.8",
"CIS_Azure_1.3.0_2.9",
"CIS_Azure_1.3.0_2.10",
"CIS_Azure_1.3.0_7.6"
]
},
{
"policyDefinitionReferenceId": "fad161f5-5261-401a-22dd-e037bae011bd",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fad161f5-5261-401a-22dd-e037bae011bd",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_2.1",
"CIS_Azure_1.3.0_2.2",
"CIS_Azure_1.3.0_2.3",
"CIS_Azure_1.3.0_2.4",
"CIS_Azure_1.3.0_2.5",
"CIS_Azure_1.3.0_2.6",
"CIS_Azure_1.3.0_2.7",
"CIS_Azure_1.3.0_2.8",
"CIS_Azure_1.3.0_2.9",
"CIS_Azure_1.3.0_2.10",
"CIS_Azure_1.3.0_7.6"
]
},
{
"policyDefinitionReferenceId": "ea9d7c95-2f10-8a4d-61d8-7469bd2e8d65",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ea9d7c95-2f10-8a4d-61d8-7469bd2e8d65",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_2.1",
"CIS_Azure_1.3.0_2.2",
"CIS_Azure_1.3.0_2.3",
"CIS_Azure_1.3.0_2.4",
"CIS_Azure_1.3.0_2.5",
"CIS_Azure_1.3.0_2.6",
"CIS_Azure_1.3.0_2.7",
"CIS_Azure_1.3.0_2.8",
"CIS_Azure_1.3.0_2.9",
"CIS_Azure_1.3.0_2.10",
"CIS_Azure_1.3.0_7.6"
]
},
{
"policyDefinitionReferenceId": "86ecd378-a3a0-5d5b-207c-05e6aaca43fc",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/86ecd378-a3a0-5d5b-207c-05e6aaca43fc",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_2.1",
"CIS_Azure_1.3.0_2.2",
"CIS_Azure_1.3.0_2.3",
"CIS_Azure_1.3.0_2.4",
"CIS_Azure_1.3.0_2.5",
"CIS_Azure_1.3.0_2.6",
"CIS_Azure_1.3.0_2.7",
"CIS_Azure_1.3.0_2.8",
"CIS_Azure_1.3.0_2.9",
"CIS_Azure_1.3.0_2.10"
]
},
{
"policyDefinitionReferenceId": "2c6bee3a-2180-2430-440d-db3c7a849870",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2c6bee3a-2180-2430-440d-db3c7a849870",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_2.11",
"CIS_Azure_1.3.0_7.6"
]
},
{
"policyDefinitionReferenceId": "5fc24b95-53f7-0ed1-2330-701b539b97fe",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5fc24b95-53f7-0ed1-2330-701b539b97fe",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_2.11",
"CIS_Azure_1.3.0_7.6"
]
},
{
"policyDefinitionReferenceId": "b53aa659-513e-032c-52e6-1ce0ba46582f",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b53aa659-513e-032c-52e6-1ce0ba46582f",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_2.12"
]
},
{
"policyDefinitionReferenceId": "2f20840e-7925-221c-725d-757442753e7c",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2f20840e-7925-221c-725d-757442753e7c",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_2.12"
]
},
{
"policyDefinitionReferenceId": "058e9719-1ff9-3653-4230-23f76b6492e0",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/058e9719-1ff9-3653-4230-23f76b6492e0",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_2.12"
]
},
{
"policyDefinitionReferenceId": "7380631c-5bf5-0e3a-4509-0873becd8a63",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7380631c-5bf5-0e3a-4509-0873becd8a63",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_2.12"
]
},
{
"policyDefinitionReferenceId": "526ed90e-890f-69e7-0386-ba5c0f1f784f",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/526ed90e-890f-69e7-0386-ba5c0f1f784f",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_2.12"
]
},
{
"policyDefinitionReferenceId": "33832848-42ab-63f3-1a55-c0ad309d44cd",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/33832848-42ab-63f3-1a55-c0ad309d44cd",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_2.12"
]
},
{
"policyDefinitionReferenceId": "b11697e8-9515-16f1-7a35-477d5c8a1344",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b11697e8-9515-16f1-7a35-477d5c8a1344",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.1",
"CIS_Azure_1.3.0_3.9",
"CIS_Azure_1.3.0_4.1.2",
"CIS_Azure_1.3.0_4.3.1",
"CIS_Azure_1.3.0_4.3.2",
"CIS_Azure_1.3.0_4.5",
"CIS_Azure_1.3.0_7.2",
"CIS_Azure_1.3.0_7.3",
"CIS_Azure_1.3.0_7.7",
"CIS_Azure_1.3.0_9.2",
"CIS_Azure_1.3.0_9.3",
"CIS_Azure_1.3.0_9.10"
]
},
{
"policyDefinitionReferenceId": "b2d3e5a2-97ab-5497-565a-71172a729d93",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b2d3e5a2-97ab-5497-565a-71172a729d93",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.1",
"CIS_Azure_1.3.0_4.3.1",
"CIS_Azure_1.3.0_4.3.2",
"CIS_Azure_1.3.0_9.2",
"CIS_Azure_1.3.0_9.3",
"CIS_Azure_1.3.0_9.10"
]
},
{
"policyDefinitionReferenceId": "26daf649-22d1-97e9-2a8a-01b182194d59",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/26daf649-22d1-97e9-2a8a-01b182194d59",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.1",
"CIS_Azure_1.3.0_4.3.1",
"CIS_Azure_1.3.0_4.3.2",
"CIS_Azure_1.3.0_9.2",
"CIS_Azure_1.3.0_9.3",
"CIS_Azure_1.3.0_9.10"
]
},
{
"policyDefinitionReferenceId": "51e4b233-8ee3-8bdc-8f5f-f33bd0d229b7",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/51e4b233-8ee3-8bdc-8f5f-f33bd0d229b7",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.2",
"CIS_Azure_1.3.0_8.1",
"CIS_Azure_1.3.0_8.2",
"CIS_Azure_1.3.0_9.11"
]
},
{
"policyDefinitionReferenceId": "c4ccd607-702b-8ae6-8eeb-fc3339cd4b42",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c4ccd607-702b-8ae6-8eeb-fc3339cd4b42",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.2",
"CIS_Azure_1.3.0_8.1",
"CIS_Azure_1.3.0_8.2",
"CIS_Azure_1.3.0_9.11"
]
},
{
"policyDefinitionReferenceId": "d661e9eb-4e15-5ba1-6f02-cdc467db0d6c",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d661e9eb-4e15-5ba1-6f02-cdc467db0d6c",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.2",
"CIS_Azure_1.3.0_8.1",
"CIS_Azure_1.3.0_8.2",
"CIS_Azure_1.3.0_9.11"
]
},
{
"policyDefinitionReferenceId": "7a0ecd94-3699-5273-76a5-edb8499f655a",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7a0ecd94-3699-5273-76a5-edb8499f655a",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.2",
"CIS_Azure_1.3.0_8.1",
"CIS_Azure_1.3.0_8.2",
"CIS_Azure_1.3.0_9.11"
]
},
{
"policyDefinitionReferenceId": "97d91b33-7050-237b-3e23-a77d57d84e13",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/97d91b33-7050-237b-3e23-a77d57d84e13",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.2",
"CIS_Azure_1.3.0_8.1",
"CIS_Azure_1.3.0_8.2",
"CIS_Azure_1.3.0_9.11"
]
},
{
"policyDefinitionReferenceId": "9c276cf3-596f-581a-7fbd-f5e46edaa0f4",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9c276cf3-596f-581a-7fbd-f5e46edaa0f4",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.2",
"CIS_Azure_1.3.0_8.1",
"CIS_Azure_1.3.0_8.2",
"CIS_Azure_1.3.0_9.11"
]
},
{
"policyDefinitionReferenceId": "8d140e8b-76c7-77de-1d46-ed1b2e112444",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8d140e8b-76c7-77de-1d46-ed1b2e112444",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.2",
"CIS_Azure_1.3.0_8.1",
"CIS_Azure_1.3.0_8.2",
"CIS_Azure_1.3.0_9.11"
]
},
{
"policyDefinitionReferenceId": "2f67e567-03db-9d1f-67dc-b6ffb91312f4",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2f67e567-03db-9d1f-67dc-b6ffb91312f4",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.3",
"CIS_Azure_1.3.0_3.10",
"CIS_Azure_1.3.0_3.11",
"CIS_Azure_1.3.0_4.1.1",
"CIS_Azure_1.3.0_4.3.3",
"CIS_Azure_1.3.0_4.3.4",
"CIS_Azure_1.3.0_4.3.5",
"CIS_Azure_1.3.0_4.3.6",
"CIS_Azure_1.3.0_5.1.1",
"CIS_Azure_1.3.0_5.1.2",
"CIS_Azure_1.3.0_5.1.5",
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "a3e98638-51d4-4e28-910a-60e98c1a756f",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a3e98638-51d4-4e28-910a-60e98c1a756f",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.3",
"CIS_Azure_1.3.0_3.10",
"CIS_Azure_1.3.0_3.11",
"CIS_Azure_1.3.0_5.1.2",
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "6625638f-3ba1-7404-5983-0ea33d719d34",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6625638f-3ba1-7404-5983-0ea33d719d34",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.3",
"CIS_Azure_1.3.0_3.10",
"CIS_Azure_1.3.0_3.11",
"CIS_Azure_1.3.0_4.1.1",
"CIS_Azure_1.3.0_4.3.3",
"CIS_Azure_1.3.0_4.3.4",
"CIS_Azure_1.3.0_4.3.5",
"CIS_Azure_1.3.0_4.3.6",
"CIS_Azure_1.3.0_5.1.2",
"CIS_Azure_1.3.0_5.1.5",
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "d9d48ffb-0d8c-0bd5-5f31-5a5826d19f10",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d9d48ffb-0d8c-0bd5-5f31-5a5826d19f10",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.4"
]
},
{
"policyDefinitionReferenceId": "4502e506-5f35-0df4-684f-b326e3cc7093",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4502e506-5f35-0df4-684f-b326e3cc7093",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.4"
]
},
{
"policyDefinitionReferenceId": "59bedbdc-0ba9-39b9-66bb-1d1c192384e6",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/59bedbdc-0ba9-39b9-66bb-1d1c192384e6",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.7",
"CIS_Azure_1.3.0_4.3.8",
"CIS_Azure_1.3.0_6.3"
]
},
{
"policyDefinitionReferenceId": "79365f13-8ba4-1f6c-2ac4-aa39929f56d0",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/79365f13-8ba4-1f6c-2ac4-aa39929f56d0",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.7",
"CIS_Azure_1.3.0_4.3.8",
"CIS_Azure_1.3.0_6.3"
]
},
{
"policyDefinitionReferenceId": "398fdbd8-56fd-274d-35c6-fa2d3b2755a1",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/398fdbd8-56fd-274d-35c6-fa2d3b2755a1",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.7",
"CIS_Azure_1.3.0_4.3.8"
]
},
{
"policyDefinitionReferenceId": "f476f3b0-4152-526e-a209-44e5f8c968d7",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f476f3b0-4152-526e-a209-44e5f8c968d7",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.7",
"CIS_Azure_1.3.0_4.3.8"
]
},
{
"policyDefinitionReferenceId": "c7fddb0e-3f44-8635-2b35-dc6b8e740b7c",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c7fddb0e-3f44-8635-2b35-dc6b8e740b7c",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.7",
"CIS_Azure_1.3.0_4.3.8"
]
},
{
"policyDefinitionReferenceId": "3c9aa856-6b86-35dc-83f4-bc72cec74dea",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3c9aa856-6b86-35dc-83f4-bc72cec74dea",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.9",
"CIS_Azure_1.3.0_4.1.2",
"CIS_Azure_1.3.0_4.5",
"CIS_Azure_1.3.0_7.2",
"CIS_Azure_1.3.0_7.3",
"CIS_Azure_1.3.0_7.7"
]
},
{
"policyDefinitionReferenceId": "a315c657-4a00-8eba-15ac-44692ad24423",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a315c657-4a00-8eba-15ac-44692ad24423",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.9",
"CIS_Azure_1.3.0_4.1.2",
"CIS_Azure_1.3.0_4.5",
"CIS_Azure_1.3.0_7.2",
"CIS_Azure_1.3.0_7.3",
"CIS_Azure_1.3.0_7.7"
]
},
{
"policyDefinitionReferenceId": "e435f7e3-0dd9-58c9-451f-9b44b96c0232",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e435f7e3-0dd9-58c9-451f-9b44b96c0232",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_3.9",
"CIS_Azure_1.3.0_4.1.2",
"CIS_Azure_1.3.0_4.5",
"CIS_Azure_1.3.0_7.2",
"CIS_Azure_1.3.0_7.3",
"CIS_Azure_1.3.0_7.7"
]
},
{
"policyDefinitionReferenceId": "333b4ada-4a02-0648-3d4d-d812974f1bb2",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/333b4ada-4a02-0648-3d4d-d812974f1bb2",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_4.1.3",
"CIS_Azure_1.3.0_4.3.7",
"CIS_Azure_1.3.0_5.3"
]
},
{
"policyDefinitionReferenceId": "1ecb79d7-1a06-9a3b-3be8-f434d04d1ec1",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1ecb79d7-1a06-9a3b-3be8-f434d04d1ec1",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_4.1.3",
"CIS_Azure_1.3.0_4.3.7",
"CIS_Azure_1.3.0_5.3",
"CIS_Azure_1.3.0_6.4"
]
},
{
"policyDefinitionReferenceId": "efef28d0-3226-966a-a1e8-70e89c1b30bc",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/efef28d0-3226-966a-a1e8-70e89c1b30bc",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_4.1.3",
"CIS_Azure_1.3.0_4.3.7",
"CIS_Azure_1.3.0_5.3",
"CIS_Azure_1.3.0_6.4"
]
},
{
"policyDefinitionReferenceId": "7c7032fe-9ce6-9092-5890-87a1a3755db1",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7c7032fe-9ce6-9092-5890-87a1a3755db1",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_4.1.3",
"CIS_Azure_1.3.0_4.3.7",
"CIS_Azure_1.3.0_5.3",
"CIS_Azure_1.3.0_6.4"
]
},
{
"policyDefinitionReferenceId": "be38a620-000b-21cf-3cb3-ea151b704c3b",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/be38a620-000b-21cf-3cb3-ea151b704c3b",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_4.2.2",
"CIS_Azure_1.3.0_4.2.3",
"CIS_Azure_1.3.0_4.2.4",
"CIS_Azure_1.3.0_4.2.5",
"CIS_Azure_1.3.0_7.5",
"CIS_Azure_1.3.0_9.6",
"CIS_Azure_1.3.0_9.7",
"CIS_Azure_1.3.0_9.8",
"CIS_Azure_1.3.0_9.9"
]
},
{
"policyDefinitionReferenceId": "e3905a3c-97e7-0b4f-15fb-465c0927536f",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e3905a3c-97e7-0b4f-15fb-465c0927536f",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_4.2.4",
"CIS_Azure_1.3.0_4.2.5"
]
},
{
"policyDefinitionReferenceId": "2c843d78-8f64-92b5-6a9b-e8186c0e7eb6",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2c843d78-8f64-92b5-6a9b-e8186c0e7eb6",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_5.1.3",
"CIS_Azure_1.3.0_5.1.4"
]
},
{
"policyDefinitionReferenceId": "0e696f5a-451f-5c15-5532-044136538491",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e696f5a-451f-5c15-5532-044136538491",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_5.1.3",
"CIS_Azure_1.3.0_5.1.4"
]
},
{
"policyDefinitionReferenceId": "c0559109-6a27-a217-6821-5a6d44f92897",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c0559109-6a27-a217-6821-5a6d44f92897",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_5.1.4"
]
},
{
"policyDefinitionReferenceId": "9622aaa9-5c49-40e2-5bf8-660b7cd23deb",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9622aaa9-5c49-40e2-5bf8-660b7cd23deb",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_5.2.1",
"CIS_Azure_1.3.0_5.2.2",
"CIS_Azure_1.3.0_5.2.3",
"CIS_Azure_1.3.0_5.2.4",
"CIS_Azure_1.3.0_5.2.5",
"CIS_Azure_1.3.0_5.2.6",
"CIS_Azure_1.3.0_5.2.7",
"CIS_Azure_1.3.0_5.2.8",
"CIS_Azure_1.3.0_5.2.9"
]
},
{
"policyDefinitionReferenceId": "2b4e134f-1e4c-2bff-573e-082d85479b6e",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b4e134f-1e4c-2bff-573e-082d85479b6e",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_5.2.1",
"CIS_Azure_1.3.0_5.2.2",
"CIS_Azure_1.3.0_5.2.3",
"CIS_Azure_1.3.0_5.2.4",
"CIS_Azure_1.3.0_5.2.5",
"CIS_Azure_1.3.0_5.2.6",
"CIS_Azure_1.3.0_5.2.7",
"CIS_Azure_1.3.0_5.2.8",
"CIS_Azure_1.3.0_5.2.9"
]
},
{
"policyDefinitionReferenceId": "af38215f-70c4-0cd6-40c2-c52d86690a45",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/af38215f-70c4-0cd6-40c2-c52d86690a45",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_5.2.1",
"CIS_Azure_1.3.0_5.2.2",
"CIS_Azure_1.3.0_5.2.3",
"CIS_Azure_1.3.0_5.2.4",
"CIS_Azure_1.3.0_5.2.5",
"CIS_Azure_1.3.0_5.2.6",
"CIS_Azure_1.3.0_5.2.7",
"CIS_Azure_1.3.0_5.2.8",
"CIS_Azure_1.3.0_5.2.9"
]
},
{
"policyDefinitionReferenceId": "ece8bb17-4080-5127-915f-dc7267ee8549",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ece8bb17-4080-5127-915f-dc7267ee8549",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_6.5"
]
},
{
"policyDefinitionReferenceId": "55a7f9a0-6397-7589-05ef-5ed59a8149e7",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/55a7f9a0-6397-7589-05ef-5ed59a8149e7",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_7.1"
]
},
{
"policyDefinitionReferenceId": "e603da3a-8af7-4f8a-94cb-1bcc0e0333d2",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e603da3a-8af7-4f8a-94cb-1bcc0e0333d2",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_7.1"
]
},
{
"policyDefinitionReferenceId": "e23444b9-9662-40f3-289e-6d25c02b48fa",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e23444b9-9662-40f3-289e-6d25c02b48fa",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_7.1"
]
},
{
"policyDefinitionReferenceId": "db28735f-518f-870e-15b4-49623cbe3aa0",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/db28735f-518f-870e-15b4-49623cbe3aa0",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_7.6"
]
},
{
"policyDefinitionReferenceId": "3ad7f0bc-3d03-0585-4d24-529779bb02c2",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3ad7f0bc-3d03-0585-4d24-529779bb02c2",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_8.4",
"CIS_Azure_1.3.0_9.11"
]
},
{
"policyDefinitionReferenceId": "e336d5f4-4d8f-0059-759c-ae10f63d1747",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e336d5f4-4d8f-0059-759c-ae10f63d1747",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_9.1"
]
},
{
"policyDefinitionReferenceId": "1d39b5d9-0392-8954-8359-575ce1957d1a",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1d39b5d9-0392-8954-8359-575ce1957d1a",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_9.1"
]
},
{
"policyDefinitionReferenceId": "b8dad106-6444-5f55-307e-1e1cc9723e39",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b8dad106-6444-5f55-307e-1e1cc9723e39",
"definitionVersion": "1.*.*",
"parameters": {},
"groupNames": [
"CIS_Azure_1.3.0_9.11"
]
}
],
"versions": [
"8.13.0",
"8.12.0",
"8.11.0",
"8.10.0",
"8.9.0",
"8.8.0",
"8.7.0",
"8.6.0",
"8.5.0",
"8.4.0"
]
},
"id": "/providers/Microsoft.Authorization/policySetDefinitions/612b5213-9160-4969-8578-1518bd2a000c",
"name": "612b5213-9160-4969-8578-1518bd2a000c"
}